It's very neat and well worked out, but in hindsight it seems kind of obvious. If the "judge" trusts an "uncorruptible" witness then deniability can't hold.

Now if only Intel could actually build a secure TPM! :P